WordPress: WordPress Automatic Update Protocol Does Not Authenticate Updates Provided by the Server

When the WordPress automatic update process is initiated likely via wp-cron.php, this is the path the code takes: https://github.com/WordPress/WordPress/blob/4a6f90db58a935abb688cfb91b391dffeda7b35c/wp-admin/includes/class-wp-upgrader.phpL242-L283...